qinghu-video-role-swap

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask the user for a token/API key and embed it directly into a CLI command (qhkit config set --token <密钥>), which causes the secret to be handled and exposed in plaintext in the agent's context and output.